devops-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard infrastructure-as-code and containerization templates that follow industry best practices. All referenced external tools and libraries are well-known within the DevOps ecosystem.
- [COMMAND_EXECUTION]: While the skill references numerous CLI tools (kubectl, terraform, gh, docker) in its documentation and templates, it includes a safety guard instruction requiring explicit user confirmation before executing any production-impacting or destructive commands.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a persona that processes user deployment requirements. It mitigates potential injection risks by providing specific boundary instructions and safety protocols for handling command snippets.
- Ingestion points: User requests for deployment automation or infrastructure management in SKILL.md.
- Boundary markers: The "SAFETY GUARD" in SKILL.md explicitly warns against executing illustrative examples and requires user confirmation.
- Capability inventory: CLI tools (kubectl, terraform, gh, docker), file system operations (git, yq, psql), and network requests (curl, wget).
- Sanitization: Stated preference for infrastructure as code and secrets management over manual/in-line configuration.
Audit Metadata